$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235bf2ba-1dfe-3ab2-9b8a-9e7c82b2b79b.roa File: 235bf2ba-1dfe-3ab2-9b8a-9e7c82b2b79b.roa (raw, json) Hash identifier: qEGta5iecPIzt2IZDTfu2wYQUOdXefi6xoqCbU2sxWw= Subject key identifier: 82:40:5D:7B:4D:CA:8F:58:B9:7E:82:43:9E:2C:DF:8D:7F:47:CB:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4467918BF7D44671C5DF60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235bf2ba-1dfe-3ab2-9b8a-9e7c82b2b79b.roa Signing time: Tue 26 Aug 2025 22:58:06 +0000 ROA not before: Tue 26 Aug 2025 22:58:06 +0000 ROA not after: Mon 24 Nov 2025 23:58:06 +0000 asID: 31898 IP address blocks: 2603:c002:3410::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:67:91:8b:f7:d4:46:71:c5:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:06 2025 GMT Not After : Nov 24 23:58:06 2025 GMT Subject: CN=59136f21-afb5-49fd-b281-91e7b1f9d715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:07:8b:a8:fd:2d:93:92:28:c2:9a:b7:23: c3:c0:30:72:bd:1c:a7:70:5d:34:e8:65:99:a4:c7: 7d:52:06:3e:d3:c1:ea:b4:1f:0a:37:6b:5f:68:c1: 18:ee:97:3b:2c:76:c7:ea:5c:e9:02:25:6e:ad:e8: 19:56:66:af:94:7d:5f:f6:bd:6f:b7:60:b0:67:91: 19:c3:0a:de:91:af:15:03:d9:88:0d:98:dc:7c:75: 40:d0:8f:ac:ed:c5:39:89:6c:80:49:83:9a:28:62: f7:11:ad:8e:a5:2e:1b:9a:ca:6a:1a:0b:cd:e2:45: 15:5b:5b:df:b6:5f:7f:58:37:b9:e2:71:4a:a0:2a: 29:1f:1d:6d:ac:3a:eb:26:92:6c:e5:4b:a6:3f:55: c6:56:94:32:3e:6b:89:8d:c5:10:31:f4:95:a1:9d: fb:aa:60:1e:f9:0a:45:42:6c:5a:08:99:10:f9:d2: 0a:2d:ca:7f:5a:13:2c:80:fd:5c:54:82:df:be:90: 20:24:fb:99:64:0a:3b:84:b4:a8:24:71:49:ef:09: c1:7b:07:49:c3:52:48:77:85:2d:ed:7c:51:a4:98: 8b:7f:3f:83:6e:c6:3e:ac:60:11:60:29:29:dc:a7: b5:25:59:64:31:64:8f:db:03:14:e1:22:1f:e0:1c: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:5D:7B:4D:CA:8F:58:B9:7E:82:43:9E:2C:DF:8D:7F:47:CB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235bf2ba-1dfe-3ab2-9b8a-9e7c82b2b79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3410::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:53:3e:11:f1:3f:d9:80:17:94:52:94:9e:af:8b:6a:32:da: b9:db:38:5d:9e:e9:cb:18:e1:1f:10:e7:81:cb:43:9e:f3:73: f1:72:cd:ec:ce:8f:ad:1e:7b:f3:8f:21:55:44:be:e1:44:89: c8:8b:00:65:b7:59:be:5f:cd:23:04:3a:a2:81:76:48:53:5e: 9e:87:9d:bc:a5:d9:4d:aa:01:a2:e1:fa:a9:d6:90:3b:ed:6c: fb:60:c1:b5:3d:aa:77:dd:d5:ef:05:85:11:d5:ed:1f:10:5c: 09:1f:fb:37:fa:8d:7d:23:34:35:66:1d:9f:56:64:75:13:8e: f6:bb:f3:64:2f:58:89:a0:80:77:42:63:b1:c5:97:58:37:59: 2a:32:b7:07:9f:d7:ab:6c:59:5e:6f:cc:78:34:e4:5a:a3:a2: a1:10:d5:ed:0d:ee:50:68:58:c7:5c:5d:7d:f1:11:fb:a4:38: 3f:90:94:e4:47:4d:27:f8:b6:48:31:54:b7:39:7b:b9:d5:c3: 89:db:0b:82:1c:89:0c:9a:a5:5d:74:25:7e:c2:e2:fd:af:24: 53:c9:14:fb:41:c0:05:6c:4e:76:8a:75:c0:2a:75:2c:6e:78: 0f:31:00:9e:57:dc:46:dc:e9:76:cc:4f:43:02:6d:50:0a:81: 8c:f8:25:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9RGeRi/fURnHF32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTgwNloXDTI1MTEyNDIzNTgwNlowLzEtMCsGA1UEAxMk NTkxMzZmMjEtYWZiNS00OWZkLWIyODEtOTFlN2IxZjlkNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFsHi6j9LZOSKMKatyPDwDByvRyncF006GWZ pMd9UgY+08HqtB8KN2tfaMEY7pc7LHbH6lzpAiVuregZVmavlH1f9r1vt2CwZ5EZ wwreka8VA9mIDZjcfHVA0I+s7cU5iWyASYOaKGL3Ea2OpS4bmspqGgvN4kUVW1vf tl9/WDe54nFKoCopHx1trDrrJpJs5UumP1XGVpQyPmuJjcUQMfSVoZ37qmAe+QpF QmxaCJkQ+dIKLcp/WhMsgP1cVILfvpAgJPuZZAo7hLSoJHFJ7wnBewdJw1JId4Ut 7XxRpJiLfz+DbsY+rGARYCkp3Ke1JVlkMWSP2wMU4SIf4BzPeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIJAXXtNyo9YuX6CQ54s341/R8tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM1YmYyYmEtMWRmZS0z YWIyLTliOGEtOWU3YzgyYjJiNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAjQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxTPhHxP9mAF5RSlJ6vi2oy2rnbOF2e6csY4R8Q54HLQ57zc/Fy zezOj60ee/OPIVVEvuFEiciLAGW3Wb5fzSMEOqKBdkhTXp6Hnbyl2U2qAaLh+qnW kDvtbPtgwbU9qnfd1e8FhRHV7R8QXAkf+zf6jX0jNDVmHZ9WZHUTjva782QvWImg gHdCY7HFl1g3WSoytwef16tsWV5vzHg05FqjoqEQ1e0N7lBoWMdcXX3xEfukOD+Q lORHTSf4tkgxVLc5e7nVw4nbC4IciQyapV10JX7C4v2vJFPJFPtBwAVsTnaKdcAq dSxueA8xAJ5X3Ebc6XbMT0MCbVAKgYz4Jc4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:17 2025 by rpki-client